mac-yolo-safeguards

Drive Igor's already-authenticated Google Chrome via AppleScript for login-walled dashboards (Stripe Payment Links, Apollo web, Play Console, LinkedIn, ASC). NEVER use Playwright MCP as the source of truth for "am I logged in?" — Playwright is a separate browser profile without Chrome cookies. Trigger when: Stripe, payment links, buy.stripe.com, dashboard.stripe.com, "logged into Chrome", login wall, Playwright got login page but user says they're signed in, Apollo web UI, or any task needs the real Chrome session. Slash: /drive-logged-in-chrome. Cross-ref: use-existing-browser-sessions.

When Igor pastes ANY credential (password, API key, token, client secret) in chat, immediately ingest it into macOS Keychain, confirm service+account only, never refuse with "don't send passwords / rotate yourself" homework. Auto-invoke on credential paste. Covers App Store Connect Apple ID, Play, Stripe, fleet ENV keys, EAS tokens.

X/Twitter via xurl CLI: post, search, DM, media, v2 API.

Execute the real cash path for mac-yolo-safeguards / ThumbGate: diagnose funnel, Apollo enrich, Gmail send, live Stripe links from Chrome, pipeline-update, never ship theater. Trigger when: make money, make money today, do everything, cash, revenue, sell, close, outreach, pipeline stuck, $0 revenue, Partner Pilot, diagnostic $499, hardening $1500, or when tempted to build another sales tool instead of sending. Slash: /execute-revenue-cash-path. Do NOT invoke for pure product engineering without a revenue ask.

Use Apollo.io for sales contact discovery and email enrichment on Igor's Mac. CLI: /opt/homebrew/bin/apollo (apollo-io-cli), already authenticated. Trigger when: make money, outreach, prospects, enrich email, find founder email, no public email, pipeline send, Partner Pilot, cold call, leads, Apollo, or when tempted to give up because leads.csv says "no public email." Slash: /apollo-io-sales. NEVER skip Apollo when money depends on a real inbox.

Drive Igor's already-authenticated Google Chrome via AppleScript for login-walled dashboards (Stripe Payment Links, Apollo web, Play Console, LinkedIn, ASC). NEVER use Playwright MCP as the source of truth for "am I logged in?" — Playwright is a separate browser profile without Chrome cookies. Trigger when: Stripe, payment links, buy.stripe.com, dashboard.stripe.com, "logged into Chrome", login wall, Playwright got login page but user says they're signed in, Apollo web UI, or any task needs the real Chrome session. Slash: /drive-logged-in-chrome. Cross-ref: use-existing-browser-sessions.

Audits mac-yolo-safeguards GitHub ship readiness — pushed commits, open/stale PRs, CI workflow conclusions, Dependabot alerts. Use when user asks if everything is merged, CI passed, pushed, or security-clean. Evidence-only; no ship theater.

Diagnoses Hermes Mobile "can't reach your computer" errors, pairing failures, and misleading connectivity banners. Use when the phone shows unreachable Mac/Hermes, pairing fails (localIp missing), LAN URLs (10.x/192.168.x) fail on cellular/5G, or sends timeout after 60–120s. Repo mac-yolo-safeguards / hermes-mobile.

Verifies Hermes Mobile ship claims with evidence — unit tests, continuous E2E, simulator full-suite, device Maestro. Use before saying fixed/shipped/works on device, when user asks "are you sure?", or after UX changes under hermes-mobile/. Prevents false simulator-E2E claims.